Senior Cloud Security Engineer: Zero-Trust & IaC

UNAVAILABLE; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Job summary

Unknown company in Washington DC is seeking a Senior Cloud Security Engineer to join our DevSecOps practice, delivering secure cloud architectures for migration, optimization and deployment. The ideal candidate will have 5–8 years of experience in cloud platforms, cybersecurity, and DevOps practices, including infrastructure as code and automation.

Responsibilities include identifying secure cloud solutions, monitoring for incidents, threat modeling, risk assessment, and automation of security

Qualifications

• Ability to obtain a U.S. government Security Clearance.
• BS degree in IT or related field; 2 years IT exp.
• 5 Years of Experience architecting, designing, developing, and implementing cloud solutions
• 5 Years of Experience with one or more clouds (i.e. AWS, Azure, or GCP)
• 5 Years of Experience with Git SCM providers such as GitHub, GitLab, Bitbucket
• 5 Years of Experience with systems development in an Agile environment
• 5 Years of Experience implementing infrastructure as code and orchestration
• 5 Years of Experience providing conducting monitoring, risk assessment, threat modeling and security testing in cloud environments
• 5 Years of Experience documenting POAMs, SSPs, and A&A support documentation
• Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby
• Experience with automation tools, including Pivotal, Chef, Terraform, CloudFormation, or Ansible

Responsibilities

• Identify and implement secure cloud-based solutions including components for zero-trust architectures, IAM policy, and data privacy
• Understanding stakeholder needs and optimizing security with usability
• Monitor cloud environments for suspicious activities with cloud-native monitoring or SIEM solutions and investigate incidents
• Examining infrastructure as code written by others and analyzing risk
• Ensure systems are safe and secure against cybersecurity threats through risk assessment, threat modeling and compliance with standards (NIST, ISO 27011, HIPAA, FISMA)
• Identify technical problems, perform root cause analysis, and develop updates and fixes
• Automate security processes such as vulnerability management and patch management
• Collaborate with developers and DevSecOps engineers to ensure security processes are followed
• Support enterprise cloud security through infrastructure as code activities and large-scale deployments
• Ensure data protection/encryption for data at rest and in transit
• Document as-is state of the environment, perform a gap analysis, and produce options and recommendations
• Identify, analyze, and resolve infrastructure vulnerabilities and deployment issues
• Engineer and implement solutions and provide continuous improvement recommendations
• Present regular status updates and provide cross training to team members

Skills

Communication

Scripting

Agile

Security

Threat modeling

Education

BS degree in IT or related field; 2 years IT exp

AWS Certified Security Specialty

AWS Certified Solutions Architect Associate

Microsoft Certified Azure Administrator Associate

CISSP

Tools

GitHub

GitLab

Bitbucket

Terraform

CloudFormation

Ansible

Pivotal

Chef

Concourse

Bash

PowerShell

Python

Groovy

Ruby

Job description

Unknown company in Washington DC is seeking a Senior Cloud Security Engineer to join our DevSecOps practice, delivering secure cloud architectures for migration, optimization and deployment. The ideal candidate will have 5–8 years of experience in cloud platforms, cybersecurity, and DevOps practices, including infrastructure as code and automation.

Responsibilities include identifying secure cloud solutions, monitoring for incidents, threat modeling, risk assessment, and automation of security